← Back to search

TikTok Agent Publisher

davidmosiah Scanned 1d ago

Local-first TikTok Content Posting API for AI agents: OAuth checks, dry-run and live uploads.

MCP Registry ↗
B
81.8 / 100

Versions

0.1.4latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 6

tiktok_agent_manifest
annotations: verified low

Machine-readable install, client, runtime and safety guidance for agents.

client string
readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
tiktok_connection_status
annotations: verified low

Check dry-run mode, OAuth readiness and live publish readiness without exposing tokens.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
tiktok_privacy_audit
annotations: verified low

Return token, media-hosting, local-file and live-publish safety boundaries.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
tiktok_publish_video
annotations: verified low

Create a TikTok video publish job. Dry-run is enabled by default; live mode requires explicit TIKTOK_DRY_RUN=false.

title string caption string post_mode enum target_url string video_path string
readOnlyHint false openWorldHint true idempotentHint false destructiveHint false
tiktok_publish_status
annotations: verified low

Fetch TikTok Content Posting API publish status by publish id.

publish_id string
readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
tiktok_list_videos
annotations: verified low

List recent TikTok videos visible to the configured OAuth token.

cursor union max_count number
readOnlyHint true openWorldHint true idempotentHint true destructiveHint false

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 25

info
Tool 'tiktok_agent_manifest' annotations are consistent annotation_checker · 80%
info
Tool 'tiktok_connection_status' annotations are consistent annotation_checker · 80%
info
Tool 'tiktok_privacy_audit' annotations are consistent annotation_checker · 80%
info
Tool 'tiktok_publish_video' annotations are consistent annotation_checker · 80%
info
Tool 'tiktok_publish_status' annotations are consistent annotation_checker · 80%
info
Tool 'tiktok_list_videos' annotations are consistent annotation_checker · 80%
high
Hardcoded OAuth client secret in davidmosiah-tiktok-agent-publisher-d262af5/test/tiktok-official.test.js auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.29.0 (GHSA-6qxp-vccf-f47h) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: tiktok_agent_manifest manifest_parser · 85%
info
Tool: tiktok_connection_status manifest_parser · 85%
info
Tool: tiktok_privacy_audit manifest_parser · 85%
info
Tool: tiktok_publish_video manifest_parser · 85%
info
Tool: tiktok_publish_status manifest_parser · 85%
info
Tool: tiktok_list_videos manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 104 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%